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(54) A method off monitoring a cellular mobile radio system to derive location area Information 



(57) A method is provided for deriving infbrnfiation 
about location areas in a cellular mobile radio system 
that comprises a fixed part providing radio coverage in a 
plurality of ceils logically grouped into location areas, and 
mobile stations for communicating with the fixed part of 
the system. In such systems, each mobile station passes 
location update messages to the fixed part of the system, 
at least upon changing location areas, to enat)lethefixed 
part to toap track of the mobile stations. The present 



method Involves monitoring these location update mes- 
sages to extract location-area related data, and then 
combining (30, 31, 32) the data extracted from many 
such messages to produce location-area related infor- 
mation such as lists of cells (35) making up each location 
area, the identity of gateway cells in each location area, 
lists (36) of adjacent location areas, and the identity of 
the most used location areas. 
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Description 

Technical Field 

The present invention relates to the derivation of 
information about location areas in cellular mobile radio 
systems such as systems operating according to the 
GSM or DCS1800 standards. For convenience, systems 
operating according to the GSM and DCS1800 stand- 
ards, including derivatives thereof, will hereinafter be 
referred to as "GSM-type" systems, DCS1800 systems 
themselves being derivative of GSM systems and exhib- 
iting the same characteristics lor present purposes; it 
should, however, be noted that the present invention is 
not restricted to GSM-type systems. 

Background Art 

A modem cellular mobile radio system, such as a 
GSM-type system, comprises a fixed part providing radio 
coverage in a plurality of cells logically grouped into loca- 
tion areas, and mobile stations for communicating with 
the fixed part of the system. In order to enable the fixed 
part of the system to locate a mobile station for the pur- 
pose of passing a new call to that mobile, the fixed sys- 
tem part keeps track of the cun-ent location area of each 
mobile station making use of the system. Of course, as 
a mobile station roams about within the coverage area 
of system, it will change location area. The mobile stetion 
is able to recognise when this occurs because it listens 
to the cell-specKic broadcast messages made by the 
system; these messages include the identity of the cur- 
rent location area in which the mobile station finds itself 
and the mobile station compares this curent location- 
area kientity with a stored record of the location area 
where It believed itself to be. In the event of the mobile 
station detecting a discrepancy between the braodacast 
location-area identity and its stored record, it will transmit 
a location update request message to the fixed part of 
the system, enabling the latter to update its record of the 
location of the mobile station. 

Information regarding the topology of cells and loca- 
tion areas, such as which cells belong to whteh location 
areas and which location areas are adjacent, can be 
assembled from the structural configuration of the sys- 
tem. However, this requires operator action with the 
result that there is no guarantee that the assembled infor- 
matton is up-to-date; In particular, changes made to the 
system may not be Incorporated into the assembled 
Information, or more likely, therewlll bea significantdeiay 
In provlcGng and introducing this information. 

Furthermore, certain location-area related informa- 
tk)n cannot be derived from static configuration data, 
such information including information about the popu- 
lation (in terms of the nunlber of mobile stations) of dif- 
ferent location areas and which eel Is form "gateway cells" 
through which mobile stations enter or leave particular 
location areas. 



It is an object of the present invention to provide a 
method by which up-to-date location-area related infor- 
mation can be derived. 



According to one aspect of the present invention, 
there is provided a monitoring method for a cellular 
mobile radio system that comprises afixed part provkling 

10 radio coverage in a plurality of cells logically grouped into 
tocation areas, and mobile stations for communicating 
with the fixed part of the system, each mobile station 
being operative to pass location update messages to the 
fixed part at least upon changing location areas; the 

IS method involving: 

- monitoring the location update messages to 
extract location-area related data from each of at 
least some of the messages. 

20 - combining the location-area related data extracted 
from a plurality of the location update messages to 
produce location-area related information, and 

- outputting the location-area related information. 

25 The location-area related Information may comprise 
the Identification of the cells making up a location area. 
In this case, the location-area related data extracted from 
a location update message will comprise the current cell 
and location area of the mobile statton that sent the mes- 
30 sage. 

Alternatively or additionally, the location-area 
related information may comprise the identification of 
which location areas are adjacent each other. In this 
case, the location-area related data extracted from a 
35 location update message will comprise the old and new 
location areas of the mobile station that has sent the 
message upon changing location areas. 

Again, the location-area related Information may 
alternatively or additionally conprlse the identification of 
40 which location areas are responsible for the most loca- 
tion update messages. In this case, the location-area 
related data extracted from a location update message 
comprises the current location area of the mobile station 
that sent the message, and the method further involves 
45 maintaining a count of such messages for each location 
area on which data is extracted. 

Yet another possibility Is that the location-area 
related information alternatively or additionally com- 
prises the identification of the particular cells In a specific 
50 tocatlon area that constitute the primary gateway cells 
for entry to the location area. In this case, the location- 
area related data extracted from a location update mes- 
sage will comprise the cun^ent cell and location area of 
the mobile station that sent the message, and the 
55 method further involves maintaining a count of such 
messages for each cell of the specific location area con- 
cerned. 

Preferably, the location update messages are mon- 
itored across the system to extract for each monitored 
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message the current cell and location area of the mobile 
station that sent the message, a check then being made 
that no celt is associated with niore than one location 
area. 

Where the mobile radio system is a GSM-type sys- 
tem, the location update messages are advantageously 
monitored on at least one 'A' interface between a Base 
Station Subsystem BSS and a Mobile Switching Center 
MSG. Preferably, the location update messages are 
monitored across the system on the 'A' interfaces asso- 
ciated with all MSCs. In this case, the method may further . 
involve: 

- determining from the location update messages 
monitored on the *A* interfaces, the current location 
area of the mobile station that sent the message; 

- associating the location area determined for each 

monitored message with the MSG associated with 
the 'A' interface on which the message was moni- 
tored: 

" checking that no location area is associated with 
more than one MSG. 

Brief Description of Drawings 

A monitoring method, according to the invention, for 
deriving location-area-related information in a cellular 
mobile radio network will now be described, by way of 
non-limiting example, with reference to the accompany- 
ing drawings, in which: 

Figure 1 is a block diagram showing the main com- 
ponents of a GSM cellular mobile radio 
system; 

Figure 2 is a diagram illustrating the relationship 
between radio cells and location areas in 
the Figure 1 system; 

Figure 3 is a diagram illustrating the layered format 
of messages used to carry location update 
requests in the Figure 1 system; 

Figure 4 illustrates the composition of a "Layer 3 
Information" information element carried 
by the Figure 3 message; 

Figure 5 illustrates the composition of a "Cell Iden- 
trfier** information element carried by the 
Figure 3 message; and 

Figure 6 is a diagram illustrating the processing of 
Information extracted from location update 
request messages for the purpose of deriv- 
ing k)cation-area-related information. 

Best Mode for Carrying Out the Invention 

Figure 1 is a diagram showing the main elements of 
a public land mobile network (PLMN) based on digital 
cellular radio technology; in particular, the Figure 1 net- 
work is a GSM network. 

The Figure 1 network comprises a network and 
switching subsystem (NSS) 10 which connects with a 



plurality of base station subsystems (BSS) 11 ; the BSS 
provide radio communication with mobile stations 12 
(only one of which is shown in Figure 1). The NSS 10 
also communicates with the fixed public network 13 (the 

s public switched telephone network PSTN and integrated 
digital services network ISDN). Indeed the PLMN can be 
thought of as an access path to the PSTN/ISDN, though 
calls may also be wholly contained within the PLMN. 
Each BSS 1 1 comprises a base station controller 

10 (BSC) 17, and a plurality of l>ase transceiver stations 
(BTS) 18 each controlled by the BSC 17. Each BTS 18 
has radio transmitters and receivers for providing radio 
coverage of a local area known as a 'ceir. 

Signalling and user data (digitised voice and other 

IS digital data such as computer data) pass between each 
mobile station 12 and the BTS 18 of the cell in which the 
mobile station is located. As a mobile station moves from 
one cell to another, control of handover of communica- 
tion with the mobile station from the BTS of the old cell 

20 to the BTS of the new cell, is effected by the BSC. 

The radio interface between a mobile station and 
BTS is standardised within a particular system such as 
GSM. Similarly, the interface between each BTS 1 8 and 
its associated BSC 1 7, by which user data and signalling 

25 are exchanged between these elements, is also gener- 
ally standardised (in GSM, this interface is known as the 
*Abis* interface). 

Each BSS 1 1 conununicates witii a mobile switching 
centre (MSG) 20 of the NSS 10. each MSG 20 generally 

30 being in communication with several BSS. The i nterface 
between a BSS and an MSG is again generally stand- 
ardised, this interface being known as the 'A* interface in 
GSM. 

In GSM networks, user data and signalling are mul- 

35 tiplexed across the radio interface, the 'Abis* interlace 
and the *A' Interface. However, within the NSS, user data 
and signcdiing are handled separately. This is shown in 
Figure 1 by depicting user-data paths in solid lines and 
signalling patiis in dotted lines; when both use the same 

40 path, a solid line with superimposed white dots is used. 
In the NSS, the user data is handled by the MSCs 
and for a given call, the user data will commonly traverse 
two MSCs 20. Although in Rgure 1 the MSCs 20 are 
shown as directly connected by a solid line, this should 

45 be understood merely as showing that user-data traffic 
can pass between the MSCs; in practice, whilst a direct 
connection is used where justified by traffic levels, MSCs 
may be connected through the Intermediary of the fixed 
public network 13. 

so In addition to tiie MSCs 20, user data may also be 
handled in tiie NSS by what in GSM parlance is known 
as a gateway MSG (QMSC) 21. The purpose of the 
GMSG 21 is to handle calls directed to mobile stations 
from outside of the PLMN. the GMSG determining where 

55 tiie call should be routed to catch up witin the mobile sta- 
tion. In practice. GMSG functionality is often provided at 
each MSG. 

The remaining components of the NSS 10 are con- 
cerned with control functions and these components 
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communicate with each other, with the MSCs and 
GMSC. and with the fixed public network through signal- 
ling links using a signalling system generally based on 
the SS7 ( CCITT Signalling System No.7) standard. 
Within the NSS 10 a QSM system uses the MAP (Mobile 5 
Application Part) protocols for non-circuit-related signal- 
ling traffic and the TUP (Telephone User Part) and ISUP 
(ISDN User Part) for circuit-related signalling traffic. 
Again, the signalling paths between components of the 
NSS 1 0 are not necessarily direct but will generally make 
use of the SS7 network associated with the fixed public 
network. 

The components of the NSS not already described 

are: 

the Home Location Register (HLR) 23 • this contains 
information about subscribers registered with the 
PLMN (such as the sendees available to a particular 
subscriber and the PLMN network address of the 
MSG where the subscriber is cun'ently located): 
the Visitor Location Register (VLR) 24 - generally, 
each MSG has its own associated VLR which holds 
both subscriber data about users currently visiting 
the area covered by the MSG, and data about the 
cun-ent location of each user within the MSGs cov- 
erage area; 

the Authentication Register (AuG) 25 - this compo- 
nent is closely associated with the IHLR and holds 
data provkiing for subscriber telentifk»tion and 
encryption of calls; 

- theEquipment Identify Register(EIR)26*thisstores 
information about the mobile stations 12 them- 
selves; 

- the SMS Gateway 27 - in GSM. a special "Short 
Message Service" is available, this being provided 
through the SMS Gateway. 

Three main control functions may be identified in 
regulating calls in the PLMN (the signalling traffic being 
the communication required to implement these func- 
tions). These three functions are: 

- radio resource management - this is the task of 
establishing, maintaining and releasing stable con- 
nections between mobile stations and an MSG 
despite movements of a mobile station. This man- 
agement function primarly involves the BSGs but 
also the BTSs and MSGs. 
mobility management - this is the task of maintain- 
ing up-to-date user location information so as to per- 
mit incoming calls to be routed to the appropriate 
mobile station; in GSM. the address of the MSG in 
the area of which a user is to be found, is stored in 
the user's HLR whilst the user's location within that 
area is hekl in the VLR associated with the MSG. 
This management function involves the MSGs/VLRs 
and the HLR. 

- call management • this task involves, as well as the 
usual control of calls as found in the fixed public net- 



work, the routing of calls towards a mobile station 
when the location of the latter is initially not known. 
In GSM. for calls towards a mobile station from out- 
side of the PLMN in which the user of the mobile 
station is registered, it is the task of the GMSG to 
find out from the home HLR of the user being called, 
where that user is and then appropriately route the 
incoming call. The call management function 
involves the MSG/VLR. HLR and GMSG. 

Turning now to Figure 2, this Rgure shows a pattern 
of hexagonal cells each representing a con'esponding 
radio cell, that is. the coverage area of a BTS (assuming 
that each BTS only covers one area). In Figure 2 only 
eight cells have been specifteally labelled, these being 
cells G1 to G8. 

Groups of physically adjacent radio cells are logi- 
cally associated, the resultant coverage areas being 
refenred to as location areas*. Thus, cells G 1 to G 8 are 
grouped together and cover a location area LI . In Figure 
2. six location areas LI to L6 are shown. 

In GSM systems, the cells associated with each 
MSG (that is, the cells associated with the BTSs of the 
BBSs connected to the MSG concerned) are divided into 
one or more location areas with the only limitation being 
that no location area can contain ceils associated with 
more than one MSG. Thus, in Figure 2 the cells associ- 
ated with the t^^per MSG 20 form three location areas 
LI to L3, whilst the cells assodated with the lower MSG 
20 form a further three location areas L4 to L6. 

It is worth nothing that the GSM standards do not 
themselves require that all the cells associated with a 
particular BSS 11 are in the same location area but this 
will often be the case. 

The purpose of grouping cells into location areas is 
to facilitate tiie task of nriobility management. In order for 
a mobile station to be located to receive an incoming call, 
two basic approaches are possible. Rrstly. a paging 
message could be transmitted in every cell of the PLMN 
in order to have a searched-for mobile station respond 
to identify its position; such an approach is. however, 
very Inefficient The second approach is to have the 
PLMN store location information on each user which is 
periodically updated as the user (or rather, his mobile 
station) moves around the network This latter approach 
is the one most usually taken. However, if a location 
update is effected every time a mobile station moves 
from one cell to anotiier. a very large amount of signalling 
traffic would be created. In order to avoid this problem, 
GSM uses the concept of a location area with a mobile 
station only initiating a location update when it deter- 
mines it has changed location area. Since the PLMN now 
knows tiie location area of each mobile station, when it 
is necessary to route an incoming call to a particular 
mobile. It is only necessary to tranennt a paging message 
in the cells of the relevant location area. 

As previously indicated, location information is actu- 
ally stored in two parts with the address of the MSG in 
whose area a mobile station is currently tocated being 
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stored in the HLR. and the local location information (that 
is. current location area) being stored in the VLB asso- 
ciated with that MSC. 

A nfK)bile station can tell when it has changed loca- 
tion area because the BTSof eachcellperiodicall/trans- s 
mits the identity of the cell and location area in which it 
is located: by storing this location area information, the 
mobile station can readily tell when it changes location 
area. 

Upon detecting a location area change, the mobile io 
station transmits a location update request" which is . 
received by the BTS of the cell in which the mobile station 
is currently to be found. "This request is then passed via 
the BSC associated with the BTS. back to the relevant 
MSC. The MSC then updates the location information is 
held for the mobile station in the VLB associated with the 
MSC. In the event that a mobile station moves from a 
location area covered by one MSC to a location area cov- 
ered by another MSC. a changeover process is effected 
between MSCs which also involves the HLR being 20 
updated with the address of the MSC into whose area 
the mobile station has now moved. 

A mobile station is also arranged to send out a loca- 
tion update request message, if it receives an Indication 
from the network that it is not known to the VLR In whose 2S 
coverage area it is cun-ently located. 

Finally, in order to ensure that up-to-date location 
infonmation is maintained on mobile stations, and also to 
enable the databases in the HLR and VLR to be rebuilt 
in case of data loss, each mobile station is arranged to 30 
send a location update request message (a "periodic** 
location update request) if it has not sent such a request 
within a predetermined, network configurable, amount of 
time. 

For whatever reason a location update request is 3S 
generated, it results in the appearance of a correspond- 
ing message on the 'A' interface between the BSC and 
MSC concerned. Figure 3 show the format of this mes- 
sage in a GSM system. 

For messages on the 'A' interface, the SS7 SCCP (Sig- 40 
nailing Connection Control Part) and underlying MTP 
(Message Transfer Part) provkje the transport service. 
More particularly, information is transported in MTP level 
2 signalling units, the composition of which Is: 

Flag Field (8 bits); 45 

Backward Sequence Number BSN (7 bits); 

Backward-Indicator bit BIB (1 bit); 

Fonrard Sequence Number BSN (7 bits); 

Fonivard-lndicator bit BIB (1 bit); 

Length Indicator LI (6 bits); so 

Spare SP (2 bits); 

Sen^ice Information Octet SIO (8 bits); 
Signalling Information Reld SIF (8n bits); 
Check Field (16 bits); 

Flag Field (8 bits). ss 
MTP level 3 information is contained in the SIO and in a 
routing label forming part of the level 2 signalling infor> 
mation field. The routing label includes source and des- 
tination addresses for the signalling unit in terms of point 



codes. Above MTP level 3 is the SCCP layer for carrying 
information according to a required service type (con- 
nectionless or connection-oriented); the SCCP header 
information relates to provision of this service as well as 
including further addressing information that. Inter alia, 
specifies what is termed a "subsystem number" for iden- 
tifying the user of the transport service provided by the 
SCCP In the present case, the user is the Base Station 
Subsystem Application Part (BSSAP) peer-to-peer pro- 
tocol operating between the BSS and MSC concerned. 
BSSAP messages are identified by a subsystem number 
of "FE" in hex. 

BSSAP is sub-divbed into two parts, each BSSAP 
message being associated with one or other part as indi- 
cated by a discriminator octet (DSCR in Figure 3). These 
two parts are: 

- BSS Management Application sub-part (BSS- 
MAP) which is used for radio resource (RR) and 
BSC management; and 

- Direct Transfer Application sub-part (DTAP) which 
isusedforthetransfer of call control (CM) and mobil- 
ity management (MM) messages. 

Location update requests are related to mobility 
management and it might therefore be expected to find 
such requests embedded in DTAP messages. In fact, 
location update requests are embedded in BSSMAP 
messages. The reason for this is that each locatton 
update request requires the establishment of a new radio 
connection between the mobile station concerned and 
the relevant MSC. and the establishment of such a con- 
nection is a radio resource management issue. Indeed, 
whenever a new radio connection is established, the "ini- 
tial message" concerned with that connection is piggy- 
backed onto the RR message on the *A' interface 
involved in setting up the connection through to the rel- 
evant MSC. More particularly, the BSSMAP message 
"Complete Layer 3 Information" is used to carry initial 
messages. Now, since the "initial message" associated 
with the making of a location update request is that 
request itself, the location update requests are to be 
found embedded in BSSMAP Xomplete Layer 3 Infor- 
mation" messages, these latter being indicated by a 
message type octet '010101 1 V (the rightmost bit being 
the first bit of the octet). 

Each "Complet Layer 3 Information' message com- 
prises two information elements, namely: 

- Cell Identifier: 

- Layer 3 Infbrmation; 

the contents of which are shown in detail in Figures 5 
and 4 respectively in the case of a location update 
request being can'ied by the 'Complete Layer 3 Infbrma- 
tion" message. For each information element, the first 
octet identifies the type of the information element whilst 
the second octet gives its length. 
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It is the "Layer 3 Information" Infornwition element 
that actually contains the location update request, this 
being indicated in bits 1 to 6 of octet 4 (see Figure 4). 
The location update type is contained in bits 1 and 2 of 
octet 5 ('LU Type*) and is used to distinguish normal loca- 5 
tion update requests resulting from a change in location 
area by a mobile station (LU Type ='00*). from a periodic 
location update request caused by a timeout in the 
mobile station (LU Type = '01"). 

For present purposes, the location-area related data 
of interest is: 

" the current cell of the mobile station making the 
location update request (octets 6 and 7 of the "Cell 
Identifier* information element): 
" the new location area of the mobile station (octets 
4 and 5 of the "Cell Identifier" information element); 
and 

- the old location area of the mobile station (octets 
9 and 1 0 of the "Layer 3 Information" information ele- 
ment). 

In accordance with tiie present invention, the mes- 
sages carrying location update requests are monitored 
to extract cell and location area (old and new) data. In 
the embodiment shown in Figure 1, a respective SS7 
monitor 40 is used to monitor each 'A' interface for the 
purpose of detecting location update requests and 
extracting cell and location area related data from each 
such request. The details of how such data can be iden- 
tified and extracted will be apparent to persons skilled in 
the art. particularly having regard to tiie explanation 
given above about where location update requests are 
to be found. However, in general terms, tiie following 
steps will be followed: 

(1) - "Complete Layers Information" BSSMAP mes- 
sages are detected by examining the SCCP subsys- 
tem number to identify BSSAP messages, then tiie 
discriminator of each BSSAP message to identify 
BSSMAP messages, and finally the message type 
of each BSSMAP message to identify "Complete 
Layer 3 Information" messages. 

(2) - the information element content of each "Com- 
plete Layer 3 Information" message is checked to 
ensure these elements are "Cell Identifier" and 
"Layer 3 Information". 

(3) - the "Layer 3 Information" information element 
is checked to see if it relates to a location update 
request and H it does, tiie type of this request is 
noted. 

(4) - where a location update request Is identified, 
the data concerning the current cell and current 
(new) location area of tiie mobile station making tfie 
location update request is extracted from tiie "Cell 
Identifier" Irrformation element, and the data oon- 
cemtng the old location area of the mobile station is 
extracted from the "Layer 3 Information" information 
element. 



The location-area related data extracted from each 
location update request is processed locally by each 
probe 40 and tiie resultant processed information is peri- 
odically downloaded over a network 41 (such as the 
operations and n^nagement network associated witii 
the main network) to a central workstation 42 where fur- 
tiier processing is canied out. Indeed, all processing of 
the extracted location area related information could be 
effected by tiie workstation 42. 

The main phases and data structures involved in 
processing tiie location-area related data are illustrated 
in Figure 6. 

The first processing phase is a 'per probe' phase car- 
ried out on the data extracted by each probe (either by 
the probe 40 itself or by the workstation 42). The main 
data structures involved in this processing phase are: 

- an MSC item 33 containing an Identifier of the 
MSC associated with the 'A' interface monitored by 
tiie probe (tiiis identifer may be programmed in 1:^ 
an operator or automatically derived by the monitor 
by reading the destination point code for tiie signal 
units can'ying tiie location update requests). 

- a location area list 34 containing an entry for each 
current (new) location area (L^ ... LJ identifted In tiie 
location-area related data extracted by tiie probe 40; 
this list 34 is pointed to by the MSC item 33, the loca- 
tion areas identified in the list being those associated 
witii tiie MSC identified in the MSC item 33. 

- for each location area identified in the location 
area list 34, a respective: 

- cell list 35 identifying the cells (C^ ... C|) asso-. 
dated with that location area (a cell Is consid- 
ered associated witii a location area if the 
location area is ttie current location area con- 
tained in tiie "Cell Identifier" information ele- 
ment identifying tiie cell); for each cell in the cell 
list 35. a count is maintained of the number of 
location update requests made with that cell 
identified as die current cell (tiiis is the "hits" 
count in Figure 6). 

- adjacent location-area fist 36 identifying the 
location areas (Lj^ ... Lp) found to be adjacent 
the location area concerned; a location area is 
considered to an adjacent one when it forms the 
"old" location area in a normal location update 
request for which the "new" location area is the 
one of interest 

Each location area entry in the location area list 34 
contains pointers to Its associated ceil list 35 and 
acljacent location areas list 36. 

During the *per prc^e* processing phase, as new 
data is extracted from each location update request mon- 
itored by a probe 40. the data is analysed to see if it iden- 
tifies a new location area not previously identified In tiie 
list 34 maintained for tiie probe - If it does, a new entry 
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is added to the list 34. The cell associated with the iden- 
tified location area is then examined and if this cell is not 
already present in the cell list 35 associated with the loca- 
tion area concerned, a corresponding new entry is made 
in list 35 with a "hits" count of one; if the cell is already 
known, its "hits" count in list 35 is inaemented. Where 
an "old" location area is identified in the extracted loca- 
tion-area related data, this location area is added to the 
adjacent location area list 36 for the location area con- 
cerned unless a corresponding entry already exists. 

The second main processing phase is a "per MSC. . 
processing phase 31 carried out by workstation 42; in 
this phase the data collected from all the probes associ- 
ated with a particular MSC, are combined. The main data 
structures involved in the phase are the same as for the 
'per probe* processing phase, the *per MSC* phase being 
primarily an aggregation of the data from multiple fists 
34, 35 and 36 for a particular MSC into single lists 34, 
35 and 36 for that MSC with the elimination of duplicate 
entries and the adding together of the cell "hits" counts 
for any cell which previously appeared in more than one 
list 35. The MSC item 33 is used to identify the groups 
of lists 34, 35 and 36 that need to be combined to con- 
solidate the information for each particular MSC. 

At this stage, since each location area in a GSM sys- 
tem should only contain cells associated with one MSC, 
all available information on the cell composition of each 
location area contained in a list 34 for a particular MSC. 
will have been collected and will be contained in the cor- 
responding cell fist 35. However, there Is no guarentee 
that all cells of a location area will have been Involved In 
a location update request during the period of monitoring 
by the relevant probes. This Is particularly the case in 
respect of any cells (Internal' cells) not located at a 
boundary of the location area concerned, for such inter- 
nal cells will not be involved in normal location update 
requests, there being no change in location area when 
such a cell is entered from an adjacent cell. An internal 
cell may nevertheless feature in the cell list 35 of a loca- 
tion area if a periodic location update request has been 
issued by a mobile station from that cell. With the above 
caveat, the cell list 35 for each location area associated 
with a particular MSC may be output as the cell compo- 
sition of that location area. 

The information contained in the cell lists 35 after 
the 'per MSC processing phase will also provide an indi- 
cation, from the "hits" count associated with each cell 
entry, of which cells are the ones mostly involved In loca- 
tion update requests - that is, are the ones through which 
the location areas concerned are mostly entered. The 
identity of, for example, the top three such cells (*gate- 
way' cells) for each location area may be identified and 
output. 

Although the *per MSC* processing does not itself 
involve combining data from location areas associated 
with different MSCs. the adjacent location areas list 36 
for each location area associated with a p€irticutar loca- 
tion area should be complete after the "per MSC 
processing phase. The lists 36 can therefore be output 



to identify the adjacent location areas for each k>cation 
area of an MSC. 

The third processing phase involves the consolida- 
tion of the lists 34. 35 and 36 collected for all MSCs in 
5 the overall systera This consolidation involves forming 
a list 37 of MSCs. each entry con^esponding to a respec- 
tive one of the MSC Items 33 and including a pointer to 
the location area list 34 relevant to the MSC concerned. 

From the consolidated system-wide location area 
10 information contained in the lists 34 to 37, it is possible 
to ascertain which location areas are most utilised by. 
adding up the 'hits' counts for the cells of each location 
area and identifying the location areas with the highest 
"hits" counts. 

IS Using the information contained in the lists 34 to 37. 
it also possible to canry out various consistency checks. 
Fa example. It is possible to arrange for the workstation 
42 to check that no cell appears in more than one list 35 
(a cell should only be associated with one location area); 

20 if this check shows that a cell occurs in more than one 
list 35, then an alarm is generated. The workstation 42 
may also be arranged to check that no location area is 
associated with more than one MSC as would be the 
case if it contained cells associated with more than one 

25 MSC; again, detection of an anomoty can be arranged 
to generate an alarm. 

Various modifications are, of course, possible to the 
above described monitoring method for deriving loca- 
tion-area related information. Additionally, the monitor- 

30 ing method can be applied to any appropriate cellular 
radio system and Is not restricted In application to GSM- 
type systems. 

Claims 

35 . 

1 . A monitaing method for a cellular mobile radio sys- 
tem that comprises a fixed part providing radio cov- 
erage in a plurality of cells logically grouped into 
location areas, and mobile stations for communicat- 
ee ing with said fixed part of the system, each mobile 
> station being operative to pass location update mes- 
sages to saki fixed part at least upon changing loca- 
tion areas; said method involving: 

45 - monitoring said location update messages to 

extract location-area related data from each of 
at least some of said messages, 
- combining sakJ location-area related data 
extracted from a plurality of said location update 
50 messages to produce location-area related 

information, and 

» outputting said location-area related informa- 
tion. 

55 2. A monitoring method according to claim 1 . wherein 
said location-area related data extracted from a said 
location update message comprises the current cell 
and location area of the said mobile station that sent 
the message, said location-area related information 
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being the identification of the cells making up a said 

location area. 

3. A monitoring method according to daim 1 . wherein 
said location-area related data extracted from a said 5 
location update message comprises the old and new 
location areas of the said mobile station that has 
sent said message upon changing location areas, 
said location-area related infommtion being the 
identification of which location areas are adjacent io 
each other. 

4. A monitoring method accorcfing to daim 1 , wherein 
said location-area related data extracted from a said 
location update message corrprises the current is 
location area of the said mobile station that sent the 
message, said method involving maintaining a count 

of such messages for each location area on which 
data is extracted, and said location-area related 
information being the identification of which location 20 
areas are responsible for the most location update 
messages. 

5. A monitoring method accorcfing to daim 1 , wherein 
said location-area related data extracted from a said 25 
location update message comprises the current cell 
and location area of the said mobile station that sent 
the message, said method involving maintaining a 
count of such messages for each cell of a said loca- 
tion area, and said location-area related information 30 
being the identification of the cells in that location 
area that constitute the primary gateway cells for 
entry to the location area. 

6. A monitoring method according to daim 1 , wherein 3S 
said location update messages are monitored 
across said system to extract for each monitored 
message the current cell and location area of the 
mobile station that sent the message, a check then 
being made that no cell is associated with more than 40 
one location area. 

7. A monitoring method according to daim 1 . wheren 
said mobile radio system is a GSM-type system and 
said location update messages are monitored on at 45 
least one 'A' interface between a Base Station Sub- 
system BSS and a Mobile Switching Center MSG. 

8. A monitoring method according to daim 7, wherein 
said location update messages are monitored so 

across said system on the 'A* interfaces assodated 
with all MSCs. said method Including: 

- determining from said location update mes- 
sages monitored on said *A* interfaces, the cur- ss 
rent location area of the mobile station that sent 
the message; 

- associating' the location area determined for 
each monitored message with the MSC associ- 



ated with the *A' interface on which the message 

was monitored: 

- checking that no said location area Is assod- 
ated with more than one MSC. 
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